Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/42b1299e-b1de-320a-9dcd-3a427553fd32.roa
File:                     42b1299e-b1de-320a-9dcd-3a427553fd32.roa (raw, json)
Hash identifier:          HCGwpGTbItK6a/wfARCUg3ByTp0ZWKvg1iJb9efJeDM=
Subject key identifier:   C3:FC:C0:F4:AD:19:71:63:29:23:06:3C:B9:38:64:75:73:8B:C4:A4
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1669B67F92D
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/42b1299e-b1de-320a-9dcd-3a427553fd32.roa
Signing time:             Mon 22 Oct 2018 10:52:54 +0000
ROA not before:           Mon 22 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:9b:67:f9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Oct 22 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=b92d8ef3-f38f-4227-b744-38d12b8ce6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:b5:5f:9e:53:28:43:3a:63:55:91:d1:27:
                    04:d0:55:9a:a3:48:11:97:f9:5b:c7:90:d4:d7:79:
                    8c:55:24:45:b2:83:56:6e:34:8a:28:1b:f6:03:b5:
                    f8:21:0b:2b:2a:8f:e0:8a:e1:13:8b:b0:71:b5:57:
                    99:29:f2:da:01:90:e9:75:5e:36:c2:da:07:d2:40:
                    03:87:54:31:00:92:f7:24:bc:0b:de:84:f6:4c:51:
                    46:8b:04:1e:ea:3e:e7:6d:ad:be:c9:ce:56:bf:78:
                    93:41:be:88:76:e9:db:40:ac:a8:cb:ee:74:24:dc:
                    57:52:9b:93:b8:06:22:a3:e1:d7:91:51:50:6c:93:
                    8f:de:f9:7e:26:66:12:d9:91:f4:b8:4b:c6:e7:92:
                    73:b4:e8:91:ac:5d:04:34:ee:55:5c:93:73:c6:97:
                    c6:80:d0:30:71:70:9f:eb:f2:58:05:f8:25:35:1c:
                    a4:ba:4c:da:39:7d:75:e9:a2:b1:3a:43:da:8e:a8:
                    a8:24:5c:e6:51:62:a7:63:79:1b:6a:f0:87:76:48:
                    01:02:08:16:f3:1f:fa:75:d4:7c:01:23:35:35:99:
                    50:eb:a0:00:cf:55:65:71:97:2e:30:9e:06:e3:1d:
                    58:10:dd:bb:e6:a1:f5:67:b4:93:0a:fe:39:d3:81:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FC:C0:F4:AD:19:71:63:29:23:06:3C:B9:38:64:75:73:8B:C4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/42b1299e-b1de-320a-9dcd-3a427553fd32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:83:2e:cd:ef:a8:91:15:32:5e:52:44:01:32:ef:13:e1:e6:
         02:3f:62:62:54:63:b6:6d:47:ff:92:8c:42:b6:db:1e:19:e8:
         df:c6:51:48:9f:b5:ac:f8:c9:3f:85:a8:d1:91:37:69:62:9e:
         cc:97:c4:ac:08:9b:42:a1:0d:8b:b7:36:b2:78:38:4f:40:1f:
         03:eb:54:68:dd:cd:f7:a3:f8:38:2e:6f:e9:a6:90:71:8d:9e:
         f7:3c:c5:bd:d3:a8:19:06:77:62:0e:94:2c:b2:d6:99:d6:1d:
         90:7b:93:ae:ea:1f:10:da:61:c9:cb:8d:ad:06:02:83:b2:a8:
         52:e1:3c:fb:78:40:d6:b8:c4:0b:6b:12:de:2e:49:5f:c7:6f:
         de:9c:78:05:50:88:8f:6e:9a:4b:cf:c0:77:a3:5f:7b:c8:10:
         24:9c:ac:7e:85:cc:1d:e2:27:4c:8d:ae:af:78:53:89:4c:d9:
         a6:2c:db:fe:46:3a:cd:8a:11:67:13:7f:d8:10:f3:02:19:5c:
         89:3b:ab:27:38:a8:05:41:30:82:3e:63:9a:0c:56:08:c4:97:
         fd:74:92:39:19:41:67:a4:3f:a1:4d:bc:93:0e:7b:07:c2:d3:
         2f:aa:71:73:3b:88:06:59:e5:05:e1:0f:c8:e6:70:6a:74:98:
         a7:1c:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----